ICAM Architect

Booz Allen Hamilton

Confirmed live yesterday High trust

Quick summary

Work type
On-site
Location
McLean, VA
Salary
$86,800–$198,000 / yr
Posted
64 days ago
Freshness
Confirmed live yesterday
Nearby
99+ roles within 25 mi

Market check

Salary context

Below market

How this pay compares to similar roles

Similar $205k
This role $142k
$66k most similar roles pay here $277k

This role pays less than 92% of similar roles. Most pay $170,000–$240,200 — the shaded band above. At the midpoint, this role pays about $142k versus about $205k for comparable roles.

Based on 240 similar postings.

Employer

About Booz Allen Hamilton

Booz Allen Hamilton is a management and technology consulting firm that provides analytics, digital, engineering, and cybersecurity solutions primarily to U.S. government agencies and commercial clients. Industry: Management & Technology Consulting

Booz Allen Hamilton currently has 802 open roles on FindRole.

Listed pay typically runs $86,800–$198,000 across 783 roles with salary data.

Most-posted roles

View all roles at Booz Allen Hamilton

At a glance

TL;DR · ICAM Architect

Role Posting Log in to save

ICAM Architect As an ICAM Architect, you will join the identity and access management team to support large-scale projects for clients. You will collaborate with stakeholders and engineering teams to analyze the identity lifecycle, define enterprise identity records, and determine specific user roles within critical processes. Your daily work involves designing, deploying, and supporting systems that manage credentials and verify privileges for high-value assets, including single sign-on and privileged access systems. To succeed, you must utilize Okta or Entra ID, certificate-based authentication, SAML 2.0, OAuth 2.0, and OpenID Connect. You will also work with RESTful APIs, Active Directory, LDAP, and languages such as Java, JavaScript, Python, PowerShell, or Groovy. This role addresses the core challenge of securing identities within zero trust architectures to prevent unauthorized access and ensure secure authentication in complex environments.

Skills

Okta Entra ID SAML 2.0 OAuth 2.0 OpenID Connect Java JavaScript Python PowerShell Groovy RESTful APIs Active Directory LDAP Zero Trust MFA Saviynt Sailpoint Omada Oracle IAM CI/CD AWS Cognito Azure AD B2C Keycloak Google Cloud Identity

What you'll do

  • Analyze identity lifecycles and define enterprise identity records based on user roles.
  • Design, deploy, and support systems for credential management and privileged access.
  • Implement single sign-on (SSO) and multi-factor authentication (MFA) within IdP environments.
  • Develop custom SAML, OAuth, and OIDC integrations while troubleshooting protocol exchanges.
  • Integrate identity providers with external applications using RESTful APIs to automate lifecycle processes.
  • Synchronize and manage identities across Active Directory and LDAP systems.
  • Resolve complex federation issues including token validation errors and assertion mismatches.
  • Build automated user lifecycle management workflows using SCIM protocols.

What we're looking for

  • U.S. citizenship is required.
  • High school diploma or GED is required.
  • Experience with Entra ID and certificate-based authentication is required.
  • Experience with SAML 2.0, OAuth 2.0, and OpenID Connect (OIDC) is required.
  • Experience developing custom SAML, OAuth, and OIDC integrations and troubleshooting protocol exchanges is required.
  • Experience with programming languages for identity platform development such as Java, JavaScript, Python, PowerShell, or Groovy is required.
  • Experience working with RESTful APIs to integrate identity providers and automate lifecycle processes is required.
  • Bachelor's degree in CS, Cybersecurity, or IT.

Related searches

More ICAM Architect jobs ICAM Architect jobs in McLean All jobs at Booz Allen Hamilton

More like this

Similar roles

Identity and Access Management Architect, Lead

Booz Allen Hamilton

Fort Meade, MD 17 days ago $99,000–$225,000
IAM Zero Trust Active Directory Entra ID LDAP SailPoint Okta Saviynt SIEM UEBA PKI SSO NIST SP 800-53 STIGs JSIG Python REST XML JSON
7+ yrs exp
Save

Identity and Access Management Architect, Lead

Booz Allen Hamilton

Fort Meade, MD 17 days ago $99,000–$225,000
IAM Zero Trust Active Directory Entra ID LDAP SailPoint Okta Saviynt SIEM UEBA PKI SSO NIST SP 800-53 STIGs HSPD-12 Python REST JSON XML
7+ yrs exp
Save

Enterprise ICAM Architect

Booz Allen Hamilton

McLean, VA 10 days ago $99,000–$225,000
ICAM Zero Trust SSO IGA PAM Entra ID Okta Saviynt CyberArk PingIdentity RBAC NIST 800-53 FIPS STIGs AWS Azure VMWare Kanban Agile SAFe AI
Save

Ping Identity Engineer

Booz Allen Hamilton

Scott AFB, IL 3 days ago $86,800–$198,000
Ping Federate Entra ID ADFS SAML 2.0 OAuth 2.0 OpenID Connect SSO RBAC ABAC Active Directory LDAP Zero Trust MFA SCIM Okta Workflows Python PowerShell Bash AWS Azure
Save

Senior Ping Identity Engineer

Booz Allen Hamilton

Scott AFB, IL 3 days ago $86,800–$198,000
Ping Federate Entra ID ADFS SAML 2.0 OAuth 2.0 OpenID Connect RBAC ABAC Active Directory LDAP Zero Trust MFA AWS Azure Google Cloud SCIM Okta Workflows Python PowerShell Bash
Save

Cybersecurity Identity Architect

3M

Maplewood, MN +1 24 days ago $221,591–$270,834
IAM SSO MFA Identity Federation IGA SAML OAuth OpenID Connect LDAP Kerberos Azure AD Entra Saviynt CyberArk AWS Azure GCP mTLS SPIFFE SPIRE Zero Trust NIST ISO GDPR HIPAA SOX PCI-DSS
10+ yrs exp
Save